From 107dfa9cf8f313abf6ea42fe5124b76a818e4906 Mon Sep 17 00:00:00 2001
From: Luis Chan <luis.chan@qq.com>
Date: Wed, 24 Jan 2024 05:26:28 +0800
Subject: [PATCH] fix temporal server start up error (#307)

---
 serverjwtauth/README.md   | 2 ++
 serverjwtauth/key/main.go | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/serverjwtauth/README.md b/serverjwtauth/README.md
index fc7a7d40..74bab62f 100644
--- a/serverjwtauth/README.md
+++ b/serverjwtauth/README.md
@@ -38,6 +38,8 @@ variables should be set:
 * `TEMPORAL_JWT_KEY_SOURCE1=http://host.docker.internal:61884/jwks.json`
 * `TEMPORAL_AUTH_AUTHORIZER=default`
 * `TEMPORAL_AUTH_CLAIM_MAPPER=default`
+* `USE_INTERNAL_FRONTEND=1`
+* `SERVICES=frontend:history:matching:worker:internal-frontend`
 
 If using the docker-compose local install, these can be set in `docker-compose.yml`. If using a standalone server
 locally, the config is:
diff --git a/serverjwtauth/key/main.go b/serverjwtauth/key/main.go
index 17435fd4..45f537f3 100644
--- a/serverjwtauth/key/main.go
+++ b/serverjwtauth/key/main.go
@@ -92,7 +92,7 @@ func tctlSystemToken() error {
 	config := serverjwtauth.JWTConfig{
 		Key:         key,
 		KeyID:       jwk.KeyID,
-		Permissions: []string{"system:admin"},
+		Permissions: []string{"temporal-system:admin"},
 		Expiration:  1 * time.Hour,
 	}
 	token, err := config.GenToken()